Protocol Stack Field Extraction for Rapid xFlow Protocol Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies face difficulties in promptly responding to the addition of new protocols in xFlow for outputting statistical information necessary for traffic visualization, requiring extensive development operations.
Innovation Solution
An extraction device that stores positional information for protocol stack elements, specifies the protocol stack of a packet, and extracts information at predetermined positions within the stack, enabling early response to new protocols without additional development.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If protocol-specific development is performed for each protocol stack to analyze xFlow packets and output statistical information, then the statistical information output is accurate and complete, but the system cannot respond promptly when new protocols are added
Solution Approach 1:
The patent implements a universal extraction template mechanism that can handle multiple protocols through a single standardized interface. The template defines common field positions (such as source IP, destination IP, port numbers) that can be applied across different protocol stacks without requiring protocol-specific development, enabling the system to adapt to new protocols immediately through configuration rather than code changes
Solution Approach 2:
The patent uses parameter-based protocol identification where protocols are distinguished by protocol type parameters rather than hard-coded structures. By changing the protocol type parameter in the extraction template, the system can switch between different protocols and extract appropriate statistical information without modifying the underlying extraction logic, thus enabling rapid response to new protocols
2Manufacturing precision
If protocol-specific development is performed for each protocol stack, then the statistical information extraction is accurate, but the development complexity and effort increase significantly
Solution Approach 1:
The patent segments the statistical information extraction process into standardized template components that can be independently configured. Each template defines specific field positions and extraction rules that can be applied universally across protocols, eliminating the need for complex protocol-specific development while maintaining extraction accuracy through structured template design
Solution Approach 2:
The patent uses template copying where a single extraction template can be replicated and applied to multiple protocol stacks. Instead of developing separate extraction logic for each protocol, the system copies and adapts the same template structure, significantly reducing development complexity while maintaining consistent extraction accuracy across different protocols
Data Source
AI summary
In an extraction device (10), a storage unit (14) stores positional information (14a) indicating a position of predetermined information included in an element forming a protocol stack of a packet in the element. A specifying unit (15b) specifies a protocol stack of a packet to be analyzed. An extraction unit (15c) extracts, from the packet, information at a position of the positional information (14a) for each element forming the specified protocol stack.